Privacy Policy

Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and profile photo.
• Mobile phone number and SMS consent. If you choose to receive text messages, we collect your mobile phone number and a record of your consent: the date and time you opted in and the exact disclosure you agreed to. We also record when you opt out.
• Event and scheduling information. Events you create or join, the times you mark as available, and your RSVPs.
• Google Calendar information (only if you connect it). Your free/busy times for the date ranges of events you've joined, and the calendar entries CouldBeDown creates for plans you've confirmed you're attending. We do not read the titles, descriptions, attendees, or other details of your existing calendar events.
• Basic technical information such as authentication cookies needed to keep you signed in.

How we use your information

• To run the service: create events, collect availability, and coordinate RSVPs.
• To show your name and photo to other participants in events you join.
• To send the text messages you opted into: a confirmation when you sign up, and event updates when a host proposes a time or confirms plans for an event you've joined.
• To show when you're busy on the availability grid and to add, update, or remove calendar entries for plans you're attending, if you connected Google Calendar.
• To respond to HELP requests and honor STOP (opt-out) requests.
• To keep the service secure and to comply with legal obligations.

SMS and mobile information

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Mobile phone numbers and SMS consent records are used only to deliver CouldBeDown event update messages. We share phone numbers only with our SMS delivery provider (Twilio) as needed to send the messages you requested. Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the text message services.

You can opt out at any time by replying STOP to any message, or by unchecking text updates on your Settings page. See our Terms & Conditions for full SMS program terms.

Google user data

CouldBeDown's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to provide the calendar features described above. We do not use it for advertising, do not sell it, and do not use it to train AI models.

You can disconnect Google Calendar at any time from Settings, which deletes our stored access token and revokes our access. You can also remove access from your Google Account permissions page.

How we share information

We do not sell your personal information. We share information only:

• With other participants in events you join (your name, photo, availability, and RSVP, never your phone number or email).
• With service providers that run the service on our behalf: Supabase (database and authentication), Twilio (SMS delivery), Google (sign-in and Calendar), and our web hosting provider. They may use the data only to provide their services to us.
• If required by law, or to protect the rights, property, or safety of CouldBeDown, our users, or others.

Data retention and your choices

We keep your information while your account is active. You can update your phone number, SMS preferences, and calendar connection at any time in Settings. To request a copy of your data or delete your account and associated data, email jlee654@gmail.com. We keep records of SMS consent and opt-outs as long as needed to demonstrate compliance.

Security

We use industry-standard safeguards, including encrypted connections (HTTPS) and access controls that keep your phone number and calendar tokens private to you and our servers. No method of transmission or storage is completely secure, but we work to protect your information.

Children

CouldBeDown is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you.

Contact us

Questions about this Privacy Policy? Contact CouldBeDown at jlee654@gmail.com.